CVE-2025-71392— SurrealDB <2.2.2 导出功能SurrealQL注入漏洞
Possible ATT&CK Techniques 3AI
T1136 · Create Account T1068 · Exploitation for Privilege Escalation T1190 · Exploit Public-Facing Application新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2025-71392の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
SurrealDB before 2.2.2 SurrealQL Injection via export
ソース: NVD (National Vulnerability Database)
脆弱性説明
SurrealDB before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.2 fails to properly escape table and field names in the command-line export command. An authenticated System User with OWNER or EDITOR roles can create tables or fields with malicious names containing SurrealQL. When a higher-privileged user subsequently imports the exported backup, the injected SurrealQL executes, enabling privilege escalation and root-level takeover of the SurrealDB instance. Applications that let users define custom tables or fields are also exposed to a universal second-order SurrealQL injection even when query parameters are sanitized.
ソース: NVD (National Vulnerability Database)
CVSS情報
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
在命令中使用的特殊元素转义处理不恰当(命令注入)
ソース: NVD (National Vulnerability Database)
影響を受ける製品
II. CVE-2025-71392の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2025-71392のインテリジェンス情報
请登录查看更多情报信息。
CVE-2025-71392 厂商安全公告 (1)
CVE-2025-71392 其他参考 (1)
- 🔗 SurrealDB before 2.2.2 SurrealQL Injection via export | Advisories | VulnCheck 記事全文を読む third-party-advisory
Same Patch Batch · surrealdb · 2026-07-18 · 24 CVEs total
| CVE-2023-54366 | 8.8 HIGH | SurrealDB before 1.0.1 Insecure Default Table Permissions |
| CVE-2024-58362 | 8.8 HIGH | SurrealDB before 1.5.5 Query Injection via RPC API |
| CVE-2024-58366 | 8.5 HIGH | SurrealDB before 1.1.1 Format String via Scripting Functions |
| CVE-2024-58368 | 7.5 HIGH | SurrealDB before 1.1.0 Denial of Service via HTTP Headers |
| CVE-2024-58364 | 6.5 MEDIUM | SurrealDB before 1.2.1 Denial of Service via Parsing Error |
| CVE-2024-58359 | 6.5 MEDIUM | SurrealDB before 2.1.0 Denial of Service via rand() Sorting |
| CVE-2024-58357 | 6.5 MEDIUM | SurrealDB before 2.1.0 Denial of Service via rand::time() |
| CVE-2024-58370 | 6.5 MEDIUM | SurrealDB before 1.1.0 Uncontrolled Recursion Denial of Service |
| CVE-2024-58361 | 6.5 MEDIUM | SurrealDB before 2.0.4 Denial of Service via Parser Exception |
| CVE-2024-58365 | 6.5 MEDIUM | SurrealDB before 1.2.0 Denial of Service via Nonexistent Function |
| CVE-2024-58369 | 6.5 MEDIUM | SurrealDB before 1.1.1 Denial of Service via Global Parameters |
| CVE-2024-58363 | 6.3 MEDIUM | SurrealDB before 1.5.4 Authentication Bypass via Database Switch |
| CVE-2024-58358 | 4.9 MEDIUM | SurrealDB before 2.1.0 Denial of Service via Nonexistent Role |
| CVE-2024-58367 | SurrealDB before 2.0.4 Improper Authorization via SELECT Permissions | |
| CVE-2024-58356 | SurrealDB before 2.1.4 Permission Bypass via DEFINE TABLE OVERWRITE | |
| CVE-2025-71398 | SurrealDB before 2.2.2 SSRF via HTTP Redirect Bypass | |
| CVE-2025-71390 | SurrealDB before 2.3.6 deny-net Bypass via DNS Resolution | |
| CVE-2025-71394 | SurrealDB before 2.2.2 Local File Read via DEFINE ANALYZER | |
| CVE-2025-71391 | SurrealDB before 2.2.2 Denial of Service via /sql endpoint | |
| CVE-2025-71397 | SurrealDB before 2.2.2 CPU Exhaustion via nested FOR loops |
Showing 20 of 24 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: surrealdb
- CVE-2025-71398
SurrealDB before 2.2.2 SSRF via HTTP Redirect Bypass - CVE-2025-71397
SurrealDB before 2.2.2 CPU Exhaustion via nested FOR loops - CVE-2025-71396
SurrealDB before 2.2.2 Denial of Service via JavaScript Scri - CVE-2025-71395
SurrealDB before 2.2.2 Memory Exhaustion via string::replace - CVE-2025-71394
SurrealDB before 2.2.2 Local File Read via DEFINE ANALYZER
同じベンダー: surrealdb
- CVE-2025-71398
SurrealDB before 2.2.2 SSRF via HTTP Redirect Bypass - CVE-2025-71397
SurrealDB before 2.2.2 CPU Exhaustion via nested FOR loops - CVE-2025-71396
SurrealDB before 2.2.2 Denial of Service via JavaScript Scri - CVE-2025-71395
SurrealDB before 2.2.2 Memory Exhaustion via string::replace - CVE-2025-71394
SurrealDB before 2.2.2 Local File Read via DEFINE ANALYZER
同じ弱点: CWE-77
- CVE-2026-16133
LiuMengxuan04 MiniCode mcp.ts child_process.spawn command in - CVE-2026-46709
Tabby: Drag-and-drop path injection still allows RCE via she - CVE-2026-56197
Windows Admin Center (WAC) Remote Code Execution Vulnerabili - CVE-2026-55145
Outlook Copilot Tampering Vulnerability - CVE-2026-50488
Clipboard User Service Elevation of Privilege Vulnerability
V. CVE-2025-71392へのコメント
まだコメントはありません